Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2026-116508

TOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based overflow

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function sub_402340 of the file infostat.cgi of the component Device-Information CGI. Performing a manipulation of the argument CONTENT_LENGTH results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TOTOLINK A950RG

  • 4.1.2cu.5268_B20221104affected

References